Re: Base system with gcc stack-smashing protector

From: Mixtim (mixtim@home.com)
Date: 05/19/01 

Date: Fri, 18 May 2001 21:13:01 -0400
From: Mixtim <mixtim@home.com>
To: Hiroaki Etoh <etoh@trl.ibm.co.jp>

On Sat, May 19, 2001 at 09:32:27AM +0900, Hiroaki Etoh wrote:
> At last, I have completed GCC extension for protectiong applications
> against stack smashing attack. It works on Intel x86 processor and IBM
> powerpc.

Have you seen Phrack Magazine issue 56, article 5? The title is "Bypassing
StackGuard and StackShield."

  "This article is an attempt to demonstrate that it is possible to
   exploit stack overflow vulnerabilities on systems secured by
   StackGuard or StackShield even in hostile environments (such as when
   the stack is non-executable)."
   
Does your patch address their concerns?

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message

Relevant Pages

  • Re: avoiding stackguard
    ... Vallez appears to be using "stackguard" generically to refer to stack ... >All we have listened about stack protections. ... In this code im using pieces of code of ntdll for doing my ...
    (Bugtraq)
  • Re: http://www.smashguard.org
    ... > Certain apps (notably java virtual machines) manipulate stack return ... the limitations with StackGuard and Java Just in Time compilers ...
    (Bugtraq)
  • Re: PowerPC ISA
    ... available description of how a PowerPC CPU might decode instructions? ... procedure's return address on the stack is being overwritten. ... exercise the debugging tools). ...
    (comp.lang.ada)
  • Re: linux interrupt handler/bottom half
    ... > grep the sources for that (in a PowerPC distribution) I think you'll find ... have a usable stack. ... There are lot of nasty things user mode code could ... corrupt, which will give you a good chance of a fast ...
    (comp.os.linux.development.system)
  • Re: PowerPC ISA
    ... available description of how a PowerPC CPU might decode instructions? ... are set up on the stack. ... PowerPC processor manual as the processor does not have a stack register; ...
    (comp.lang.ada)
Quantcast